Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FBxyOMCfG6TRJON73uZPglqi9rU.cer
File:                     FBxyOMCfG6TRJON73uZPglqi9rU.cer (raw, json)
Hash identifier:          YuwydeeGexcP66X39Wbrf7yeHQQJF5Q00TTbXMdq0P0=
Subject key identifier:   14:1C:72:38:C0:9F:1B:A4:D1:24:E3:7B:DE:E6:4F:82:5A:A2:F6:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221F88801FA08323D54F924BBE0D0B38
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/66/f197ac-5c59-4e41-b3f6-50af450f4a45/1/FBxyOMCfG6TRJON73uZPglqi9rU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/66/f197ac-5c59-4e41-b3f6-50af450f4a45/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:47:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51656
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:88:80:1f:a0:83:23:d5:4f:92:4b:be:0d:0b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=141c7238c09f1ba4d124e37bdee64f825aa2f6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:b6:e5:e0:75:e2:60:7e:48:02:d1:61:80:
                    02:07:20:7e:f1:8e:a5:fd:31:71:57:e1:84:60:02:
                    9f:80:1c:d5:aa:c9:79:f6:d6:91:a6:fe:13:9f:96:
                    75:fc:5b:af:4a:1d:90:eb:88:34:41:ac:25:d4:e4:
                    f5:17:0e:b5:25:a3:b0:0e:74:25:5b:27:38:8f:ce:
                    be:b7:be:55:b7:ce:74:5a:63:dc:4b:b2:62:f7:4b:
                    45:91:05:f0:4f:a5:fc:2f:5f:af:da:99:eb:7e:84:
                    83:84:55:4b:2d:1a:d9:07:50:4a:5b:a0:f4:06:06:
                    ef:2b:d2:76:16:2e:79:1e:b8:81:08:84:3b:74:95:
                    04:1c:4b:e6:ed:6b:58:7c:fa:3f:90:3a:43:92:41:
                    5c:ac:43:63:fc:36:9e:79:b3:6e:88:0b:aa:de:fc:
                    c1:a4:ef:ec:d5:1a:81:54:0d:3c:9d:07:bd:7a:c4:
                    5f:26:e2:f9:f6:02:c4:d5:26:92:5c:38:77:c2:d0:
                    d4:af:a3:a6:01:28:fa:dd:dd:e6:89:40:56:87:90:
                    c0:67:da:a1:b6:da:38:8e:b4:5b:3c:17:fc:d9:aa:
                    81:4e:de:f8:76:7f:60:8e:1c:eb:63:b5:4f:3d:a0:
                    42:6a:d2:24:35:3d:f0:d9:87:bc:6f:fe:a7:0d:5a:
                    8a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1C:72:38:C0:9F:1B:A4:D1:24:E3:7B:DE:E6:4F:82:5A:A2:F6:B5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f197ac-5c59-4e41-b3f6-50af450f4a45/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f197ac-5c59-4e41-b3f6-50af450f4a45/1/FBxyOMCfG6TRJON73uZPglqi9rU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51656

    Signature Algorithm: sha256WithRSAEncryption
         1b:88:a4:39:1c:3e:19:c7:db:ce:6e:e8:e7:cd:4d:6c:f9:a5:
         e6:03:bf:98:44:b5:50:86:aa:f5:0c:6d:5d:51:9c:a2:a4:4e:
         a6:ea:50:8a:d8:6b:70:a6:03:3d:6d:d1:8d:4c:f0:c1:ae:18:
         89:18:f3:37:09:42:6f:41:c9:04:1e:eb:07:00:97:a5:eb:db:
         37:af:2d:cb:f6:d6:76:40:5a:b7:f2:61:d1:28:4f:64:e3:01:
         8d:7a:99:4d:59:6e:77:39:87:9d:da:cc:65:fa:27:b7:9b:8a:
         ce:34:9e:03:04:c3:c7:ba:3a:16:d4:54:91:68:00:a1:88:df:
         0b:1a:dc:46:81:6c:da:84:23:16:21:1d:94:d2:fc:49:e7:40:
         d2:1a:3c:fc:c3:30:49:85:ac:8d:fe:b6:fc:cc:04:ea:eb:7f:
         56:72:55:5f:61:96:3d:f5:9f:29:fc:6d:62:43:c3:44:13:0e:
         08:a1:71:93:9a:de:6e:79:eb:64:59:cb:87:4d:c0:d7:b4:4c:
         8f:17:5c:ae:6e:12:0c:4d:f6:14:24:b9:78:f2:65:5e:e7:70:
         86:0b:1b:25:e2:83:c8:91:e3:d0:2a:d6:62:af:10:65:46:a0:
         2c:03:52:83:48:cf:7f:d0:65:e3:93:45:48:9c:c6:e3:6b:ab:
         9a:4e:63:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:24:28 2025 by rpki-client